Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-21 Thread Stefan Xenon
Am 08.01.2014 16:26, schrieb Hans-Christoph Steiner: > > > On 01/08/2014 07:02 AM, Werner Koch wrote: >> On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: >> >>> OpenPGP card as a PKCS11 keystore. It seems that things are close: Java can >>> use NSS as a provider of PKCS11. I guess the

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-17 Thread Sean Lynch
Scute accesses the card via either scdaemon or gpg-agent (I can't remember which and I'm on my phone), so you don't need to release the card and reenter your PIN to switch back and forth between PKCS#11 and gpg/gpgsm. However, it's a minimal implementation of the parts of the API necessary for X.50

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-17 Thread Hans-Christoph Steiner
On 01/17/2014 03:05 AM, Werner Koch wrote: > On Fri, 17 Jan 2014 02:24, se...@literati.org said: > >> Scute works great with Firefox, but keep in mind it requires gpg-agent (or > > Sure. That is the whole point of the exercise. > >> at least scdaemon). AFAIK it's not intended to work with any

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-17 Thread Werner Koch
On Fri, 17 Jan 2014 02:24, se...@literati.org said: > Scute works great with Firefox, but keep in mind it requires gpg-agent (or Sure. That is the whole point of the exercise. > at least scdaemon). AFAIK it's not intended to work with anything other > than Firefox right now. I've been meaning t

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-16 Thread Sean Lynch
On Wed, Jan 8, 2014 at 4:02 AM, Werner Koch wrote: > On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: > > > OpenPGP card as a PKCS11 keystore. It seems that things are close: Java > can > > use NSS as a provider of PKCS11. I guess the question is whether opensc > is > > making a PKCS#

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-13 Thread Werner Koch
On Wed, 8 Jan 2014 16:26, h...@guardianproject.info said: > key #3 is for authentication, is there some restriction in the OpenPGP card > that would prevent the certificate/key combo in position #3 from being used > for signing? No. At least not enforced by the card or GnuPG. > What I read th

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-08 Thread Hans-Christoph Steiner
On 01/08/2014 07:02 AM, Werner Koch wrote: > On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: > >> OpenPGP card as a PKCS11 keystore. It seems that things are close: Java can >> use NSS as a provider of PKCS11. I guess the question is whether opensc is >> making a PKCS#11 interface t

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-08 Thread Werner Koch
On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: > OpenPGP card as a PKCS11 keystore. It seems that things are close: Java can > use NSS as a provider of PKCS11. I guess the question is whether opensc is > making a PKCS#11 interface to the OpenPGP card, that's the bit that I don't Scu

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
On 01/07/2014 09:32 AM, Hans-Christoph Steiner wrote: > > NdK wrote: >> Il 07/01/2014 04:01, Hans-Christoph Steiner ha scritto: >> >>> Does anyone know if there is any chance of using an OpenPGP smart card for >>> Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if >>> thing

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
NdK wrote: > Il 07/01/2014 04:01, Hans-Christoph Steiner ha scritto: > >> Does anyone know if there is any chance of using an OpenPGP smart card for >> Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if >> things work the otherway around: java using the OpenPGP card. It wou

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread NdK
Il 07/01/2014 04:01, Hans-Christoph Steiner ha scritto: > Does anyone know if there is any chance of using an OpenPGP smart card for > Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if > things work the otherway around: java using the OpenPGP card. It would be > super usefu

using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
Hey all, Does anyone know if there is any chance of using an OpenPGP smart card for Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if things work the otherway around: java using the OpenPGP card. It would be super useful to be able to use the same smartcard for both Androi